[ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15305085#comment-15305085 ]
Hudson commented on AMBARI-16171: --------------------------------- FAILURE: Integrated in Ambari-trunk-Commit #4946 (See [https://builds.apache.org/job/Ambari-trunk-Commit/4946/]) AMBARI-16171. Changes to Phoenix QueryServer Kerberos configuration (sgunturi: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=7d6c539c66fa96441aeafb8a70f9a6a255a9eb38]) * ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py * ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json * ambari-server/src/test/python/stacks/2.5/common/test_stack_advisor.py * ambari-server/src/main/resources/stacks/HDP/2.0.6/services/stack_advisor.py * ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java * ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java * ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java AMBARI-16171. Changes to Phoenix QueryServer Kerberos configuration - (sgunturi: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=c5526333d28fbdec006536b9815ff924096f9da6]) * ambari-server/src/test/python/stacks/2.5/common/test_stack_advisor.py * ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py > Changes to Phoenix QueryServer Kerberos configuration > ----------------------------------------------------- > > Key: AMBARI-16171 > URL: https://issues.apache.org/jira/browse/AMBARI-16171 > Project: Ambari > Issue Type: Improvement > Reporter: Josh Elser > Assignee: Josh Elser > Fix For: 2.4.1 > > Attachments: AMBARI-16171-stackadvisor-WIP.patch, > AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch, > AMBARI-16171.006.patch, AMBARI-16171.007.patch, AMBARI-16171.009.patch, > AMBARI-16171.addendum.patch > > > The up-coming version of Phoenix will contain some new functionality to > support Kerberos authentication of clients via SPNEGO with the Phoenix Query > Server (PQS). > Presently, Ambari will configure PQS to use the hbase service keytab which > will result in the SPNEGO authentication failing as the RFC requires that the > "primary" component of the Kerberos principal for the server is "HTTP". Thus, > we need to ensure that we switch PQS over to use the spnego.service.keytab as > the keytab and "HTTP/_HOST@REALM" as the principal. -- This message was sent by Atlassian JIRA (v6.3.4#6332)